Public Ask Niyra API — backend lives

The public Niyra surface — two new HTTP endpoints, anonymous-allowed, sliding-window per-IP rate limit (10 req/15min anon, 60/15min signed-in). Backed by pgvector cosine search over the marketing/docs corpus and a constrained Haiku system prompt that locks the model to "Niyra explaining her own product."